{"report_id":"f522254e-7565-4b5d-ab34-32ddd658cf1a","version":6,"status":"done","tags":[],"date":"2025-08-30T19:07:19Z","url":{"schema":"https","addr":"xa29x.com/","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xa29x.com/","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"title":"XA29X Official Website Pre-Sale (up to 200% bonus)"},"submit":{"url":{"schema":"https","addr":"xa29x.com/","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-04T19:07:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xa29x.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xai17a.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"xa29x.com","ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-04","domain_rank":0,"first_seen":"2025-08-30T19:07:20.197958Z","last_seen":"2025-08-30T19:07:21.20783Z","alert_count":28,"request_count":28,"received_data":3020234,"sent_data":13105,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Elementor:3.23.4","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress:6.7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-08-27T15:11:05.791298Z","alert_count":0,"request_count":4,"received_data":67097,"sent_data":2139,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xai17a.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-10-30","domain_rank":0,"first_seen":"2025-01-22T04:10:54.561024Z","last_seen":"2025-08-18T13:21:40.170522Z","alert_count":2,"request_count":2,"received_data":0,"sent_data":919,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-27T15:14:26.687687Z","alert_count":0,"request_count":1,"received_data":145474,"sent_data":967,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xa29x.com/wp-content/plugins/elementor/assets/js/frontend.mind5d5.js?ver=3.23.4","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e666e84ad32383368858b52a855e6ce","sha1":"c987c41ad3d9b2183b76dddfb30370ba76605228","sha256":"d472c6dc0eac7e2287635400d88ce4fe64211ba51929027fad3e45fa84b6c302","sha512":"7b98c711d28a2db0a0dcebb11f64e6de0bad9ce07d531bacb29a38c3b668e4e902b26c62ef2a539bc13285e7698d48ad17dc6cbef1eaeb11a59cb262e8707933","ssdeep":"768:qRPzjLRkRL/vx1QEa/A3JSJGfVgNq1Jj/QlKEAzBc5GETSebsvTilI8UHTSX5aol:qRP/LRkRLHx1QEa3GfV3JREAzBc53TSS","tlshash":"da03081271d2d4aa518f48b7b433122cb3264dcdb402b59db2bd6ce6a4b1e8373b2775","size":40249,"data":"","first_seen":"2024-08-05T13:56:20Z","last_seen":"2026-08-05T20:52:16.316789Z","times_seen":3898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"af052da3cb1830eed03e9c79ec35637d","sha1":"9dd538a69d4fcdc5dc2309685de675e6ac3ff18e","sha256":"4dd1c93977063719550c762fcec9964cb0cfd0efbdde173af7a723f28fbd9271","sha512":"d52b43658ff2328d5d30baead3599b6aff8d2109901a17b2c8c45abd3f0e847ffef7bb91d04eaa963b271fc0305d5e806a0eb4d8a88db6fb5852302fed0f88d0","ssdeep":"192:bbcBBEIrafLZwIxMuI9IUIvI7IDIH8CMrI5nTdpS5lWjMNMW8:bwHEIYLZwpfJh4CmMW8","tlshash":"6022f9ce7ac8a6b8c1736152d11b65efd121bee912442c138a50d8acff30399e967f64","size":10095,"data":"","first_seen":"2025-08-30T19:02:07.608465Z","last_seen":"2025-08-30T19:07:29.830118Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-includes/js/dist/i18n.minc33c.js?ver=5e580eb46a90c2b997e6","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","size":9141,"data":"","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-08-06T07:55:26.118152Z","times_seen":261425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0524f2696e30ddc34f6e62e0637d00a9","sha1":"f582aaf73bae27ec3d000223c33af625921cc596","sha256":"5b5e588bff036b58318eff5550d49e52d03ae3ade064ee3fe6fbe36591457835","sha512":"0327cff5d2f2fd547bdecc9bc9baa903ceb06a055ffa49f0785f47d3cfc68ee095fd60136c2f335c194095800a298d66cd8c235e65fa94f14541703ef59a5f05","ssdeep":"","tlshash":"3561b89a37353887317715d2aa2f0e07eb7658371684d035c9fab7541cb1463c33ad49","size":3222,"data":"","first_seen":"2025-01-07T12:09:12.876801Z","last_seen":"2026-03-28T02:35:12.071993Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e434b0b4f43ec7216073eed1f3ffb51","sha1":"8d8a4ab1ed63889095bdf38ba646319b639feabc","sha256":"dd0ec57abf154d52c161fae92db6014f042417d9660679097ae55287041ec52e","sha512":"20978b9f1afc586c91351ef67791224fb5469004a1ebb5af608a05f643103a358e605d2c54cdba2174bc35c266ec963690d5d1fc3f80a045f4c33fc5f67b9ab7","ssdeep":"","tlshash":"6d110cf3b3dd907fbaae6d66193402cd6a1c90735c100a5bfeac3575cc8042538b1d40","size":922,"data":"","first_seen":"2024-04-08T18:49:14Z","last_seen":"2026-08-06T07:58:41.169213Z","times_seen":217955,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8013fb3a0e9b9f63e309a90d933f409","sha1":"b1cee38b445c04bc3f55178594dd086c8024185b","sha256":"57d6ee957844b524d5a33f0b18b17c68fbe50b80964863a200747c6cb3613baa","sha512":"e78196445d8163c9c2d970c228719d0fac9c14fdaef7c9acc44a7a1a2a45234627b29606e85a0979b51b5bde9ddbf7a00e693b6ccd272eda51e60244ce9ebc8d","ssdeep":"","tlshash":"a3d023d52c778935659c034a5077d3987661306077115740c1cdcc6bae21ed344f1d5c","size":217,"data":"","first_seen":"2025-08-30T19:07:29.837005Z","last_seen":"2025-08-30T19:07:29.837005Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-content/plugins/elementor/assets/js/webpack.runtime.mind5d5.js?ver=3.23.4","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"65aed095bbea6c79aefa67ab240f55e6","sha1":"237a4e165dadfb8c7ccd5cf3653365a4f4fedcca","sha256":"612c7268d82895019e8b18ec61941fd00d0ada067dae8facb7b9c2bade385a4d","sha512":"dbb3bc28fd813f08802e055d2a299a0f29d0966012e93d7ef61ed217fe2b4e4cc557154567b60501b7933db3d9ea422b9d35d182f774805d23fa9b467d54c760","ssdeep":"96:BlsNt0jqf9fz9TNrf8nDmDllCjNVobVDPkqflkxwvT8S2:7sNCjw9fhTNYyD4N4FPkyXgS2","tlshash":"b7a130d41b90fc6735e135c5a41aa731762fc0337d1ab8c1fa22dced98e8a9187a9931","size":4997,"data":"","first_seen":"2024-08-05T13:56:21Z","last_seen":"2026-08-05T20:52:16.343132Z","times_seen":3754,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b18ab1c7cbb44f317423b92b75a5d9ac","sha1":"675c70d0a356d3870095b77c6990e65017982549","sha256":"66246b04584a56860ade5e12c3469df29af8824d788a619e41907521a17a3bfc","sha512":"d0adba2e908b641c10a9c58f0f97e0aa83b7ba4cb3cb7137a481a87722bf64538668bbd995ed691affabdda953237171686b6ded0291a7e35537353da9fa7f02","ssdeep":"","tlshash":"891189c0b20506f400612529c4381bc9e6b9699cb6db1ca7cc0c9c2cf1b261f45b6f7e","size":1017,"data":"","first_seen":"2023-11-08T09:30:36Z","last_seen":"2026-07-13T09:11:39.784408Z","times_seen":3797,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d30f13da1f424ee0383b76edc55881e1","sha1":"7e348a5f57ab13eedbc4ed917cdeee5bb9f9bd46","sha256":"cf01a621447e67a81629bc28276677c86c48fd72c44cba83a82448574aadfd60","sha512":"06571ea850a1ff105d50dd65340b1109e07dba2915279d549f0880e161c5487e0462e63f5bcf3daa1feb9ebd6fc00f84d552fb806f5f5405ebac203f097b89b8","ssdeep":"","tlshash":"daa0244530471400c04dc1504d13fc00041010c7034fc50435d05d30d550440744331f","size":68,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-08-04T22:47:10.38833Z","times_seen":118767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-includes/js/dist/hooks.min4fdd.js?ver=4d63a3d491d11ffd8ac6","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6fddbb6be69793478de26fc245b2acf","sha1":"a136ebf5054fdc19729b3592005fe0fefec4bb4c","sha256":"9a1e0d38b691f1d22a92cff65ec0439b428170ac39a4493c7ecb06d5585f56a3","sha512":"8a766304caa9c888cfcab64eabab906905965e7fbcfc4f79c74ab122b892456abad215d0883df17023a16a18ba15a6a4b3d0fa5345cab7173d778f725b827c33","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRemN:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC6","tlshash":"b4a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","size":4776,"data":"","first_seen":"2024-11-13T05:08:51.627546Z","last_seen":"2026-08-06T07:55:26.098332Z","times_seen":230453,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-includes/js/jquery/jquery-migrate.min5589.js?ver=3.4.1","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-06T08:00:45.056062Z","times_seen":922720,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-content/plugins/elementor/assets/js/frontend-modules.mind5d5.js?ver=3.23.4","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f8bba8f628df726ea180cae2123cbce","sha1":"b0fcff669c228dd3c29ba046c8757570f137553c","sha256":"f4d7dcc49b91d63d4175cd0bcbf3547aa4ef1eeb2b5839d74bee58cb2775afde","sha512":"d4db6de7c5e1649b4e7137823fcbd55552bc3ec08599bb0cce69e3ff16f9547005eea2c3ac9dc23e693fbc3d06b176d61d5d0783983b307e05f6eea82130e30e","ssdeep":"1536:geAjA679C+QRNtewmXC4WHqMPBWPbx84XwCRfYNQAzeLHeBHmjknzRNS4cR8+St1:uwmJjAOIyI2BCWgYQn","tlshash":"e773da963112b4b70bdf41eb701b150af22318e8b409b45d79b8cdfb65b0e9623ba735","size":73568,"data":"","first_seen":"2024-08-05T13:56:21Z","last_seen":"2026-08-05T20:52:16.343771Z","times_seen":3864,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"710e7700d8cd6a03ece51a82fdf9880d","sha1":"fd5e441140d39f7be4eb4e5646f78f54d002321e","sha256":"4a953d08f653ad49bf24993cf0af58e17b50afa6ec22e08a985d0932143d8d8a","sha512":"d01606d026e1b0f3478468aa528fe3260d748230eb48bb5f5517758468aa2a74e9b64791df154774f6b8d163682802c6a90d8711af38678e3cfcc32141b4c4bf","ssdeep":"","tlshash":"ef21796a1b225e2047aea7c861c63e6f98d4033325d4f55e16dad0a801f7cadf04a3e3","size":1197,"data":"","first_seen":"2025-01-07T12:09:12.883722Z","last_seen":"2026-03-28T02:35:12.076992Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-content/plugins/elementor-pro/assets/js/frontend.min28fc.js?ver=3.23.3","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0a2f51765a92a636852b44bdfc07f6a","sha1":"bc4a0e02ecd149e738b87ab6756ac1558da1b21e","sha256":"c440a64d637fe748b3872cd160dc9aabb3d9e5f2c8010675d1b949c99e34beb4","sha512":"d92d0e759cc46a1994cb3aa9e1b8e2633a2ffdf8682ab1899b9d7aacb4df0cb3a1811dedae745ea6e8b76132ab4a96282aa4a1a5715f28bef44d6cfdac9014e7","ssdeep":"768:aTLX+EVxFm6cKibdndptaQ9HuGJswyC/pkTAQYtDT6HJiwknOsN7KOljuOzQYqEw:etVxFm61ib94Q9HuGHiiwkOsN7KOljuP","tlshash":"51b2d9063153a87a50cfc15be067420e7b374885740570ed7abc6ceba5b8d9a33ea339","size":25050,"data":"","first_seen":"2024-08-06T05:36:53Z","last_seen":"2026-08-05T20:52:16.324109Z","times_seen":3595,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-includes/js/jquery/ui/core.minb37e.js?ver=1.13.3","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fbc22c79d40119dde9a5d16897002b9","sha1":"e9837519aca724457792e2d5ee98a97a0367cdf9","sha256":"7e84c9f8d71bc6eb2dac2fce59a6caea62da51ffa8cf56b41806f59386ab1322","sha512":"3118a198a3710c839c15d6c4b5dc9f9adcd637913af2e26f438b01c80b27281f4937e25aad2817855d8b3eb36207c61ae16d62b17e698799c5316e86f52ac6fc","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhBGX0CiS9rH/OrLrErJ29FkFvd:iS33Z5vK47kv","tlshash":"81a2d94eb246380586f7a2a5402f521fb132e25cb10588ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2024-07-16T20:15:04Z","last_seen":"2026-08-06T07:06:12.592686Z","times_seen":41927,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9e887f972378d9944c8195b60f11f159","sha1":"980b5d59284e0e26abf3272ea739b9b954345e73","sha256":"cc419927bcf61c50f2146f9985bad8504bf3662cd28e3e43773abe6e2f4b3a05","sha512":"db640fb3385f49016049bc6e99b1db2c4516334b81cead85b63a1276e0483068dd9e42400e74efc8bc1efcc1d761c338cdc8393cd5a1e6fa2763220567be008d","ssdeep":"","tlshash":"3c51822079456a7f83a38b913927bf07ae3c05364081bcbaf4bd487c05f69653207e97","size":2818,"data":"","first_seen":"2025-08-30T19:07:29.850491Z","last_seen":"2025-08-30T19:07:29.850491Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min28fc.js?ver=3.23.3","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1e347f637e6cedbe57d46f801d8c534","sha1":"40e9ee2e614a91cd5c1afba1dc9fa3e15f7ce3eb","sha256":"e7139bd7f7f045b4e0c2ed3ca13bcefdce330a38e84bff93917caa4bbef28f59","sha512":"444b49a78576671d6d674fe893eb42a1e9ac90bf8fdb7b504191bcf96293882e953d6aac0265256cee86437299b453fa3cac733dd631b966a8e067fb3ea7117c","ssdeep":"768:p3TAiHylK1YE6A5yLseTRadwdddrdDdLdDdGdydOdad6dpdLdFdVdf1FUfvqMIOu:NANK1YE6A5yLsSRaC/dR9ZQIM4g7lv//","tlshash":"fb13a55171aaca6845cfc4abf423264fa722ac9cb413f4d77afc8d826464ec76350771","size":42585,"data":"","first_seen":"2024-08-06T05:36:53Z","last_seen":"2026-08-05T20:52:16.319168Z","times_seen":3594,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"90639078650510c6f3c513eed50f4326","sha1":"54f7ab40a5382f6aaa584890939c0a20bac71921","sha256":"5151735543718650063ea487132dcf6fb289d77fcf2980f1b31cccd912d70c78","sha512":"6040103b66e194456eba4eb5b3be3542d406669d80b466d951f9b5e068d2803feb11257078bfd18c8c174bb9ab20c1c76a2773686ddd574a16790f2cfe3e555e","ssdeep":"","tlshash":"5811c0b53a1a5534cac9418b317ee7a93e3260717a029184c2accc299d58e9714efdbe","size":902,"data":"","first_seen":"2025-08-30T19:07:29.851645Z","last_seen":"2025-08-30T19:07:29.851645Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min28fc.js?ver=3.23.3","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"06e65e3f3efc8bc03a8028d683faaf9c","sha1":"65190238c4d0cf5088a64e0a5dbef346fbb7c6b9","sha256":"123570e6c301162c06b39e2d7e93f31dabcd43e37344fc87f15dc9c5f48f5803","sha512":"2588befb241d59f6da19fd3c73c9eda15b74453198aa086b3de67283e637029375dc588bf0f11c9db6589f6a730ef42ec301eac8091e0cd3e1d2d47f6812aee4","ssdeep":"96:BOV+Ha9P6f0Rfz2dL5MeaqA6iZh0DTl7CKEpre1oXq6x4AfqqMxEjRl2c1cV2eVM:MEHGSfWYL5MeawiZQTgvrL66COBMxEPf","tlshash":"efc165991a58ad2f26e03ad8b0876b701e3dd0233d19da81e552eddc59f8fd083d9533","size":6060,"data":"","first_seen":"2024-08-06T05:36:52Z","last_seen":"2026-08-05T20:52:16.309137Z","times_seen":3599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-includes/js/jquery/jquery.minf43b.js?ver=3.7.1","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-06T08:00:45.015216Z","times_seen":1006919,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min05da.js?ver=4.0.2","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3819c3569da71daec283a75483735f7e","sha1":"ecd40a5cc6f0b76200c454ca880210dc301cfab8","sha256":"214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0","sha512":"2710655dff46653daeb3a6e3f6d36f885e51d5b375738ee353aca40c6f66ae1a7dece57039d58747012ed9ea2822191143c06f270123b8cc580f6a41b8e8aef4","ssdeep":"192:GngaW9ELBD26z861V/CvJiVKIsvfT+6EdpEsBpP9Qwo7Q4a99RfuzqXppc4mmm9t:Ggz9kBD26861V/wsVKIsvTEdpEsnmwoz","tlshash":"994221493e0724222faf41f9fc1b468a632b013894c584bbb8e4d5dd18f19296f77b78","size":12198,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-08-06T08:01:07.582919Z","times_seen":74185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"xa29x.com/wp-content/plugins/elementor/assets/css/frontend-lite.mind5d5.css?ver=3.23.4","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa29x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 11:34:44 GMT","end":"Sun, 02 Nov 2025 12:32:59 GMT"},"fingerprint":{"sha1":"69:42:FA:87:57:29:F2:88:11:E6:D1:D4:CA:C6:CF:78:34:CA:FE:24","sha256":"7A:21:C3:D4:D1:DD:2C:A5:F7:3C:A9:BE:3F:5F:A3:A0:7B:52:55:52:DB:2B:73:F4:EF:F1:C0:31:8D:3A:92:AC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend-lite.mind5d5.css?ver=3.23.4 HTTP/1.1\r\nHost: xa29x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa29x.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Aug 2025 19:06:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 21850\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Sep 2025 19:06:57 GMT\r\nlast-modified: Thu, 31 Oct 2024 10:24:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ltp%2B6g0IyiXcNgMbIuKSOM1jaDjK42a2qGW8t7RIipyMuzp836WfhhcekkiDiXoyMr82mNtT0p7l0EO6nsX4wJw5%2BcUoswI%3D\"}]}\r\ncf-ray: 9776917bb9837131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":212120,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65496)","md5":"7375eb9ac771f2f8fe6377e8a67674c7","sha1":"e8387270c959bd9c17da70d09d730007cf63e368","sha256":"6f69140fa5c83536f52bcd3c902b44f35d9e9386d1575c6eb46b061893e3837d","sha512":"29d47159bc8ef59b1e99a01a17bef0f21e93cde625d3c9323797b56e60735d392bf84b53fe8089db92e88de3c4f282a6f341576e85e7b5b3eecbb139a4fda035","ssdeep":"1536:sA2tQ4Wqn8pnSla6T8L47YwbuXhlTmJOj9QVn3eQZCNsUsEPfPN+Kj1:s3YB","tlshash":"c724f0d13d27122d37bbcb1ac693ba5c7354e4c0c90bf9def401808691f99da2a6b563","first_seen":"2024-08-05T13:56:21Z","last_seen":"2026-08-05T20:52:16.33289Z","times_seen":2531,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xa29x.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min94a4.css?ver=8.4.5","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa29x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 11:34:44 GMT","end":"Sun, 02 Nov 2025 12:32:59 GMT"},"fingerprint":{"sha1":"69:42:FA:87:57:29:F2:88:11:E6:D1:D4:CA:C6:CF:78:34:CA:FE:24","sha256":"7A:21:C3:D4:D1:DD:2C:A5:F7:3C:A9:BE:3F:5F:A3:A0:7B:52:55:52:DB:2B:73:F4:EF:F1:C0:31:8D:3A:92:AC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min94a4.css?ver=8.4.5 HTTP/1.1\r\nHost: xa29x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa29x.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Aug 2025 19:06:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 4248\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Sep 2025 19:06:57 GMT\r\nlast-modified: Thu, 31 Oct 2024 10:24:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UugnpfeQLQ%2BIilVGHExi4ZXvSn7UJSD1H5QWbDvwShepERXtOON7YQK8H8bQ2cwZIweXiBQ3RsDj%2FwkRYCuAeiCZE2pS09Y%3D\"}]}\r\ncf-ray: 9776917bb9847131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":16471,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16214)","md5":"a2431bc290cf34e330e11ec4cfce1247","sha1":"32a53342901fef5f4f4dbb26a555e730f84437a4","sha256":"c57e64fcb72bddafa9c38de574441c3e69ac6c961df96b0cad34da83658bd196","sha512":"87aef045472db25020faead697ec02813ba38d4e313caf437b4ca5cadbb7a7495805ac0b74e5de60cd84ccecab290b76d003eb1fadfcdaa70e650a597658ada9","ssdeep":"192:IbgmUJbiKneTT4bHZ+SKbnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:IdUbeTMbHZ+Vnh2AVfHfA4XYz","tlshash":"fa7234681340282753274f374b71cbb9d9b444d24b93896e91c0ee88d7b6cbd236f6e9","first_seen":"2023-04-05T10:48:11Z","last_seen":"2026-08-06T08:01:52.559044Z","times_seen":139964,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xa29x.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-content/plugins/elementor/assets/js/frontend-modules.mind5d5.js?ver=3.23.4","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa29x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 11:34:44 GMT","end":"Sun, 02 Nov 2025 12:32:59 GMT"},"fingerprint":{"sha1":"69:42:FA:87:57:29:F2:88:11:E6:D1:D4:CA:C6:CF:78:34:CA:FE:24","sha256":"7A:21:C3:D4:D1:DD:2C:A5:F7:3C:A9:BE:3F:5F:A3:A0:7B:52:55:52:DB:2B:73:F4:EF:F1:C0:31:8D:3A:92:AC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.mind5d5.js?ver=3.23.4 HTTP/1.1\r\nHost: xa29x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa29x.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Aug 2025 19:06:57 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 19134\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 31 Oct 2024 10:24:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i5lHYB2ex5EUOjqPqyorEXTGB1yZQEQ3JHzKjXYskAVxvl2Un9Qll6vK24vqd%2BWMZMGdD16oBT61o3e9JU8N4vmYIAKwq5U%3D\"}]}\r\ncf-ray: 9776917bd9907131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":73568,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65496)","md5":"4f8bba8f628df726ea180cae2123cbce","sha1":"b0fcff669c228dd3c29ba046c8757570f137553c","sha256":"f4d7dcc49b91d63d4175cd0bcbf3547aa4ef1eeb2b5839d74bee58cb2775afde","sha512":"d4db6de7c5e1649b4e7137823fcbd55552bc3ec08599bb0cce69e3ff16f9547005eea2c3ac9dc23e693fbc3d06b176d61d5d0783983b307e05f6eea82130e30e","ssdeep":"1536:geAjA679C+QRNtewmXC4WHqMPBWPbx84XwCRfYNQAzeLHeBHmjknzRNS4cR8+St1:uwmJjAOIyI2BCWgYQn","tlshash":"e773da963112b4b70bdf41eb701b150af22318e8b409b45d79b8cdfb65b0e9623ba735","first_seen":"2024-08-05T13:56:21Z","last_seen":"2026-08-05T20:52:16.343771Z","times_seen":3864,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xa29x.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:22:25 GMT","end":"Mon, 03 Nov 2025 19:22:24 GMT"},"fingerprint":{"sha1":"F5:9E:5D:EB:46:9B:ED:9F:D2:D7:E8:D1:06:43:DF:9D:0C:13:7E:75","sha256":"AA:C4:C0:AF:38:AE:91:75:3F:86:CE:32:70:A9:8F:C4:2F:7F:D2:28:D1:34:AD:0A:C8:E2:6C:6E:4D:46:72:23"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xa29x.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 Aug 2025 11:06:50 GMT\r\nexpires: Sat, 29 Aug 2026 11:06:50 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 115207\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-06T08:02:20.494909Z","times_seen":956873,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":85,"dns":6,"connect":11,"send":0,"wait":10,"receive":9,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai17a.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js","fqdn":"xai17a.com","domain":"xai17a.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.851Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js HTTP/1.1\r\nHost: xai17a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa29x.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T08:01:09.34408Z","times_seen":17739288,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xai17a.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-content/uploads/elementor/css/post-78e70.css?ver=1732862662","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa29x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 11:34:44 GMT","end":"Sun, 02 Nov 2025 12:32:59 GMT"},"fingerprint":{"sha1":"69:42:FA:87:57:29:F2:88:11:E6:D1:D4:CA:C6:CF:78:34:CA:FE:24","sha256":"7A:21:C3:D4:D1:DD:2C:A5:F7:3C:A9:BE:3F:5F:A3:A0:7B:52:55:52:DB:2B:73:F4:EF:F1:C0:31:8D:3A:92:AC"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-78e70.css?ver=1732862662 HTTP/1.1\r\nHost: xa29x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa29x.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Aug 2025 19:06:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 348\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Sep 2025 19:06:57 GMT\r\nlast-modified: Fri, 29 Nov 2024 12:14:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7i9TUMWbKs3hClmhnI38wPWSceA%2Bp%2BDyP698PUzkAuqLs97qizdbGjIAQH2pc1j6ySxzNbHv31Og9FIBRiebJKYTchCgDBk%3D\"}]}\r\ncf-ray: 9776917bb9857131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1201,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1201), with no line terminators","md5":"75f3814e8a5b60ca0464abf3515bc95e","sha1":"2878d80809c8c3a5ce6e50c08c8271033f6c6eeb","sha256":"5f781c2d27434ff0c98a5cabc238dd33379d136d463c44d84cdddff7dd4ee930","sha512":"0f87cd1c51701025c7e731c655a6df1c44558d0458799d28fe89c92586ac1cf0250e8647d1acc915f2e90cf40b5dd1f2b8be68a632d9db2b2d426e449fbb8ace","ssdeep":"","tlshash":"442148457a23d036e07b093f91c3b02c012cd46b625fcaeff41d9649f9bfa0a2269643","first_seen":"2025-01-22T04:10:56.660284Z","last_seen":"2026-07-14T19:11:59.969276Z","times_seen":194,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xa29x.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-content/plugins/elementor-pro/assets/css/frontend-lite.min28fc.css?ver=3.23.3","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa29x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 11:34:44 GMT","end":"Sun, 02 Nov 2025 12:32:59 GMT"},"fingerprint":{"sha1":"69:42:FA:87:57:29:F2:88:11:E6:D1:D4:CA:C6:CF:78:34:CA:FE:24","sha256":"7A:21:C3:D4:D1:DD:2C:A5:F7:3C:A9:BE:3F:5F:A3:A0:7B:52:55:52:DB:2B:73:F4:EF:F1:C0:31:8D:3A:92:AC"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/frontend-lite.min28fc.css?ver=3.23.3 HTTP/1.1\r\nHost: xa29x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa29x.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Aug 2025 19:06:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 1410\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Sep 2025 19:06:57 GMT\r\nlast-modified: Thu, 31 Oct 2024 10:24:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=18xuGl3R3Fzi7cfVHkrMU5ZRXDfvmM1m55n9RKqftOCCQNAvsFsutBjeEc9wkJkj1GYf4BzMzGhzwTw5GMzI0UbdHS7MTrI%3D\"}]}\r\ncf-ray: 9776917bb9867131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11120,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11076)","md5":"216c32f3990959583529768174c4b9e4","sha1":"cb7a9e23bbb20c79bf32bb635798bcca80072266","sha256":"913f6d5b0c7fd111d450761896a3b2bfab7dde8dcdacc7aeaa5b578616ad97de","sha512":"7e4a4600c48ea716d1b8fba8492935f3627d93a48e6fea8073a42e81d8b978da6fe72066c38b4b0ac3802f3df2638697da49cb45d0b176d9d6859637e7e9243d","ssdeep":"192:nlCUn8qrIuqxIZqJIrqYqP3qYIYIP3IHq8qL3q/I8IL3IuqL3IL+q8IXqFqDqeq7:Spk5y","tlshash":"4a326b36bd0b485c53bf51b7908b269c0a09c9cae1611cadfb60650f41f4f89f3b9627","first_seen":"2024-08-06T05:36:54Z","last_seen":"2026-08-05T20:52:16.327681Z","times_seen":882,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xa29x.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-includes/js/jquery/ui/core.minb37e.js?ver=1.13.3","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa29x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 11:34:44 GMT","end":"Sun, 02 Nov 2025 12:32:59 GMT"},"fingerprint":{"sha1":"69:42:FA:87:57:29:F2:88:11:E6:D1:D4:CA:C6:CF:78:34:CA:FE:24","sha256":"7A:21:C3:D4:D1:DD:2C:A5:F7:3C:A9:BE:3F:5F:A3:A0:7B:52:55:52:DB:2B:73:F4:EF:F1:C0:31:8D:3A:92:AC"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.minb37e.js?ver=1.13.3 HTTP/1.1\r\nHost: xa29x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa29x.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Aug 2025 19:06:57 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 6811\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 27 Jun 2024 20:21:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2F17f7oKllhrUykfSKWqVrfgH0rhcg1CnxDlYpATv9A6DaLVGVE6lOqLEFL%2BiFpCMELjEJqyFtbl%2F3qWaW0ovCCR0OW7f6Q%3D\"}]}\r\ncf-ray: 9776917be9957131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"8fbc22c79d40119dde9a5d16897002b9","sha1":"e9837519aca724457792e2d5ee98a97a0367cdf9","sha256":"7e84c9f8d71bc6eb2dac2fce59a6caea62da51ffa8cf56b41806f59386ab1322","sha512":"3118a198a3710c839c15d6c4b5dc9f9adcd637913af2e26f438b01c80b27281f4937e25aad2817855d8b3eb36207c61ae16d62b17e698799c5316e86f52ac6fc","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhBGX0CiS9rH/OrLrErJ29FkFvd:iS33Z5vK47kv","tlshash":"81a2d94eb246380586f7a2a5402f521fb132e25cb10588ddf468d8da3c7eea95173f79","first_seen":"2024-07-16T20:15:04Z","last_seen":"2026-08-06T07:06:12.592686Z","times_seen":41927,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xa29x.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xai17a.com/wp-includes/js/wp-emoji-release.min.js?ver=6.7.1","fqdn":"xai17a.com","domain":"xai17a.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.721Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.7.1 HTTP/1.1\r\nHost: xai17a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa29x.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T08:01:09.34408Z","times_seen":17739288,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xai17a.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/banner-01-1536x1393.png","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa29x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 11:34:44 GMT","end":"Sun, 02 Nov 2025 12:32:59 GMT"},"fingerprint":{"sha1":"69:42:FA:87:57:29:F2:88:11:E6:D1:D4:CA:C6:CF:78:34:CA:FE:24","sha256":"7A:21:C3:D4:D1:DD:2C:A5:F7:3C:A9:BE:3F:5F:A3:A0:7B:52:55:52:DB:2B:73:F4:EF:F1:C0:31:8D:3A:92:AC"}}},"request":{"raw":"GET /banner-01-1536x1393.png HTTP/1.1\r\nHost: xa29x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa29x.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Aug 2025 19:06:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 1816295\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Sep 2025 19:06:57 GMT\r\nlast-modified: Sun, 01 Dec 2024 18:43:08 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cwxhDbewTL%2F6kOY2EHGotBU5TwsLGrvTyYGV1Txe9i5v7D4vz8K6sSD2xxQVlq5bhE25ZHrpgdM7RTwjzag1lqsLorc9C7c%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9776917bc98b7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1816295,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2048 x 1857, 8-bit/color RGBA, non-interlaced","md5":"c045d11690421157e95b95282a39be5d","sha1":"bad1761ae41d0dbfc867db1d715660a53bc90721","sha256":"e4e027874ce009f7aa296e97890adf3df6f4b37d8c1e3a66918500368cf2b0cb","sha512":"9e39cf0859b7bca7f16dd77e02dfaff9fd387267002d5417579457cee0ceaf706768616b7d30648b245970d8998060578f62b8f7706c54e95dc4b239dd36e952","ssdeep":"24576:Ed/omF5jQVwti2LNC9PofjN7nZ+GKrWplg8qUNZ:U/DFlQVSiV9Po7ZCWpy6","tlshash":"c125235cb6ffed96cb6f79395a8ca7174825703233f48eda42cbd96c4582cd804a1329","first_seen":"2025-08-03T19:51:53.660712Z","last_seen":"2026-03-28T02:35:12.060008Z","times_seen":25,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":209,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xa29x.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-includes/js/jquery/jquery-migrate.min5589.js?ver=3.4.1","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa29x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 11:34:44 GMT","end":"Sun, 02 Nov 2025 12:32:59 GMT"},"fingerprint":{"sha1":"69:42:FA:87:57:29:F2:88:11:E6:D1:D4:CA:C6:CF:78:34:CA:FE:24","sha256":"7A:21:C3:D4:D1:DD:2C:A5:F7:3C:A9:BE:3F:5F:A3:A0:7B:52:55:52:DB:2B:73:F4:EF:F1:C0:31:8D:3A:92:AC"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min5589.js?ver=3.4.1 HTTP/1.1\r\nHost: xa29x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa29x.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Aug 2025 19:06:57 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4678\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 09 Jun 2023 12:19:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aCO%2BYIuBXfxo4W%2FSZQ0qhvv7lZmc6BbG8kO8q2BAEFweUzn3TZt35z82bBK%2F9IG4ZMlYVoLphInxd1P9pxDfy8wx4O5%2BF8E%3D\"}]}\r\ncf-ray: 9776917bd98f7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-06T08:00:45.056062Z","times_seen":922720,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xa29x.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-includes/js/dist/i18n.minc33c.js?ver=5e580eb46a90c2b997e6","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa29x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 11:34:44 GMT","end":"Sun, 02 Nov 2025 12:32:59 GMT"},"fingerprint":{"sha1":"69:42:FA:87:57:29:F2:88:11:E6:D1:D4:CA:C6:CF:78:34:CA:FE:24","sha256":"7A:21:C3:D4:D1:DD:2C:A5:F7:3C:A9:BE:3F:5F:A3:A0:7B:52:55:52:DB:2B:73:F4:EF:F1:C0:31:8D:3A:92:AC"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.minc33c.js?ver=5e580eb46a90c2b997e6 HTTP/1.1\r\nHost: xa29x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa29x.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Aug 2025 19:06:57 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3542\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 15 Feb 2024 22:23:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tQPDZ1T2SHSCt0c6fYxblWZCmCc0uYJKOCLX6rKUBS1k5pENn3vIhT7R1YN7SXpseMtbuaHm7zLTNq4kpoPQfVpLUMXLsgk%3D\"}]}\r\ncf-ray: 9776917bd9927131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9141,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-08-06T07:55:26.118152Z","times_seen":261425,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xa29x.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v23/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:22:25 GMT","end":"Mon, 03 Nov 2025 19:22:24 GMT"},"fingerprint":{"sha1":"F5:9E:5D:EB:46:9B:ED:9F:D2:D7:E8:D1:06:43:DF:9D:0C:13:7E:75","sha256":"AA:C4:C0:AF:38:AE:91:75:3F:86:CE:32:70:A9:8F:C4:2F:7F:D2:28:D1:34:AD:0A:C8:E2:6C:6E:4D:46:72:23"}}},"request":{"raw":"GET /s/poppins/v23/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xa29x.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 Aug 2025 18:48:38 GMT\r\nexpires: Fri, 28 Aug 2026 18:48:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 23 Apr 2025 16:05:59 GMT\r\ncontent-type: font/woff2\r\nage: 173899\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-08-06T08:02:06.641699Z","times_seen":388124,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":121,"dns":6,"connect":20,"send":0,"wait":9,"receive":1,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-content/uploads/elementor/css/post-96722.css?ver=1733023211","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa29x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 11:34:44 GMT","end":"Sun, 02 Nov 2025 12:32:59 GMT"},"fingerprint":{"sha1":"69:42:FA:87:57:29:F2:88:11:E6:D1:D4:CA:C6:CF:78:34:CA:FE:24","sha256":"7A:21:C3:D4:D1:DD:2C:A5:F7:3C:A9:BE:3F:5F:A3:A0:7B:52:55:52:DB:2B:73:F4:EF:F1:C0:31:8D:3A:92:AC"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-96722.css?ver=1733023211 HTTP/1.1\r\nHost: xa29x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa29x.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Aug 2025 19:06:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 827\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Sep 2025 19:06:57 GMT\r\nlast-modified: Sun, 01 Dec 2024 08:50:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sZuxyrfAkJ5hGkYgNy7XCf5CXPURaHl7V5Cg6YnaLfH7GrEP84M1V42W5lT6JzGfqIb3zUvQ8Is1717MN4mta6dN7bY9JA4%3D\"}]}\r\ncf-ray: 9776917bc9887131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5153,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5153), with no line terminators","md5":"7334075e5331bd99c6ad3daee6d26b79","sha1":"4c3e1751ae8a8823d59efca67a4998a4fb69ce4c","sha256":"abd9a27fef858ce3ca80d9c777107926d740a40a2166ad2e8fabb3f6fece0590","sha512":"ae4b8551f4c8f83e672adc86d7e2d0c32788e9eaf874c619f1562d6f6a06c573cfdfe910254d29d8cf49246bcfc600df3748010acb29f18dff50133e422baeb3","ssdeep":"48:gkDwnhCHnJsOnJmK1gnJPcNp884hZsP/y+nP3wl3vDonJ3ZfLAn83vc1MTrkAnP3:gjynJfnJSnJ0NbnNQEnJ3ZfLAn83NRp","tlshash":"75b1e4603e43522c723f601f9423f5ac6569cccada7e36d6e9201623fcb6c9173a0a58","first_seen":"2025-01-22T04:10:56.658947Z","last_seen":"2026-07-11T08:53:25.171281Z","times_seen":46,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xa29x.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CPoppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic\u0026display=swap\u0026ver=6.7.1","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:22:25 GMT","end":"Mon, 03 Nov 2025 19:22:24 GMT"},"fingerprint":{"sha1":"05:AF:87:21:D4:6B:A6:86:ED:A7:D2:07:92:06:E4:D4:79:84:27:E8","sha256":"F6:EC:75:67:99:66:34:CC:0C:0F:9D:D7:8B:6A:04:94:98:0C:7B:B5:47:E2:47:37:A6:F8:E2:08:99:72:AB:BE"}}},"request":{"raw":"GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CPoppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic\u0026display=swap\u0026ver=6.7.1 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa29x.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 30 Aug 2025 19:06:57 GMT\r\ndate: Sat, 30 Aug 2025 19:06:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":144788,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"a1c98c3449644bc2690151d8f2cf6816","sha1":"dfa11144e25ddd22c37eb2552111d988c8e55aa4","sha256":"b15a0cf3f827c5bf5ce8ee55a561eff3e16c77f28a478f5e5ee91b71bb32a14c","sha512":"2b1ef8b535e85ca7a8f80acc82434757a10ff3b6680fa18a5e48c1e592a9028f8c95366dad6ddb082df37fb7519c3fef3e9f613ff27d78966a7cb7fb7c987fe9","ssdeep":"768:XHrkjJRDDDjDKDjDaBDeKDpDNDPiChCaUeh8QIpJaJaLeazXd8cLcaaeLi+WzTUL:6fSBcjm1gDed4HSZ8jm","tlshash":"e9e31e91042b9040ab835cd223cfbf35fe0f92547141d0b9abfc5aabaddbc66126835d","first_seen":"2025-06-03T02:47:41.816685Z","last_seen":"2025-09-05T11:23:47.396686Z","times_seen":127,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":115,"dns":0,"connect":20,"send":0,"wait":39,"receive":0,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/XAI_Logo.svg.png","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa29x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 11:34:44 GMT","end":"Sun, 02 Nov 2025 12:32:59 GMT"},"fingerprint":{"sha1":"69:42:FA:87:57:29:F2:88:11:E6:D1:D4:CA:C6:CF:78:34:CA:FE:24","sha256":"7A:21:C3:D4:D1:DD:2C:A5:F7:3C:A9:BE:3F:5F:A3:A0:7B:52:55:52:DB:2B:73:F4:EF:F1:C0:31:8D:3A:92:AC"}}},"request":{"raw":"GET /XAI_Logo.svg.png HTTP/1.1\r\nHost: xa29x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa29x.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Aug 2025 19:06:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 5840\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Sep 2025 19:06:57 GMT\r\nlast-modified: Sun, 01 Dec 2024 18:43:53 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JWh5VQhQlvSryjbZWDPuFJBdRXehOgXgUER%2FXwAoe0sCwVA0I7Q7VGbGBA1ZBU08ZFOfguv7S36KHNPisjclFl%2FVhnGedFw%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9776917bc9897131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5840,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 363, 8-bit gray+alpha, non-interlaced","md5":"fa3a692a011e2862fd70666b2001ef43","sha1":"ff94879e0a544ae6bb2237cc2f3156f03b13a3f2","sha256":"f0c8456a481709a9f190e23e164327a2b6d7867e646a5774f0f0c251c6160d23","sha512":"34c8fdec1d3545144eacc17eee8cd17b8e6f20ac2d0a225b1e73b31b2fab2868319d9e30d6a0b0f44713076ac14a02ea065d2a81c8309d7836295709a011ab8e","ssdeep":"96:mA/QyzBveWeL6qZzf4yy7d4YxMex5kNjkKPUdpAP54H+v0TKY+rC+YFoEPATL7c4:7oyzBv7y68syWd4YxxamKUdW4evzY+rF","tlshash":"1fc1ae30f14c6dbddd0d62b858523bdd230f678d49fc42ff1a41a23bc6aa5044a462c9","first_seen":"2024-12-08T06:44:01.439558Z","last_seen":"2026-07-11T08:53:25.169309Z","times_seen":50,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xa29x.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-content/plugins/elementor/assets/js/frontend.mind5d5.js?ver=3.23.4","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa29x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 11:34:44 GMT","end":"Sun, 02 Nov 2025 12:32:59 GMT"},"fingerprint":{"sha1":"69:42:FA:87:57:29:F2:88:11:E6:D1:D4:CA:C6:CF:78:34:CA:FE:24","sha256":"7A:21:C3:D4:D1:DD:2C:A5:F7:3C:A9:BE:3F:5F:A3:A0:7B:52:55:52:DB:2B:73:F4:EF:F1:C0:31:8D:3A:92:AC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.mind5d5.js?ver=3.23.4 HTTP/1.1\r\nHost: xa29x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa29x.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Aug 2025 19:06:57 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 11884\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 31 Oct 2024 10:24:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1QpK31R1dRu%2FLYMrlCUuRW16GQu5Pe9G5MKH0RbK11rtYVlYaGrneHWaeTk3yQ67YIOMPE49ZbPQ%2Bw%2B%2FRM%2B0%2Ft6mqxnft4k%3D\"}]}\r\ncf-ray: 9776917be9967131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40249,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (40209)","md5":"6e666e84ad32383368858b52a855e6ce","sha1":"c987c41ad3d9b2183b76dddfb30370ba76605228","sha256":"d472c6dc0eac7e2287635400d88ce4fe64211ba51929027fad3e45fa84b6c302","sha512":"7b98c711d28a2db0a0dcebb11f64e6de0bad9ce07d531bacb29a38c3b668e4e902b26c62ef2a539bc13285e7698d48ad17dc6cbef1eaeb11a59cb262e8707933","ssdeep":"768:qRPzjLRkRL/vx1QEa/A3JSJGfVgNq1Jj/QlKEAzBc5GETSebsvTilI8UHTSX5aol:qRP/LRkRLHx1QEa3GfV3JREAzBc53TSS","tlshash":"da03081271d2d4aa518f48b7b433122cb3264dcdb402b59db2bd6ce6a4b1e8373b2775","first_seen":"2024-08-05T13:56:20Z","last_seen":"2026-08-05T20:52:16.316789Z","times_seen":3898,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xa29x.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:22:25 GMT","end":"Mon, 03 Nov 2025 19:22:24 GMT"},"fingerprint":{"sha1":"F5:9E:5D:EB:46:9B:ED:9F:D2:D7:E8:D1:06:43:DF:9D:0C:13:7E:75","sha256":"AA:C4:C0:AF:38:AE:91:75:3F:86:CE:32:70:A9:8F:C4:2F:7F:D2:28:D1:34:AD:0A:C8:E2:6C:6E:4D:46:72:23"}}},"request":{"raw":"GET /s/poppins/v23/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xa29x.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 Aug 2025 20:10:19 GMT\r\nexpires: Fri, 28 Aug 2026 20:10:19 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 23 Apr 2025 16:07:17 GMT\r\ncontent-type: font/woff2\r\nage: 168998\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-08-06T08:02:06.680498Z","times_seen":288489,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":214,"dns":4,"connect":11,"send":0,"wait":9,"receive":1,"ssl":188},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-includes/js/jquery/jquery.minf43b.js?ver=3.7.1","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa29x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 11:34:44 GMT","end":"Sun, 02 Nov 2025 12:32:59 GMT"},"fingerprint":{"sha1":"69:42:FA:87:57:29:F2:88:11:E6:D1:D4:CA:C6:CF:78:34:CA:FE:24","sha256":"7A:21:C3:D4:D1:DD:2C:A5:F7:3C:A9:BE:3F:5F:A3:A0:7B:52:55:52:DB:2B:73:F4:EF:F1:C0:31:8D:3A:92:AC"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.minf43b.js?ver=3.7.1 HTTP/1.1\r\nHost: xa29x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa29x.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Aug 2025 19:06:57 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 29744\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 28 Aug 2023 23:44:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4qUmfR3FZBucFNx%2BIz5JQRhplFeQh5eN0hwySiZfOpmNJzU9bTDyQbA8wQo3UvKif6Gkq7JuZhlD6oCSnztzI1CZKCenwk4%3D\"}]}\r\ncf-ray: 9776917bd98e7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-06T08:00:45.015216Z","times_seen":1006919,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xa29x.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa29x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 11:34:44 GMT","end":"Sun, 02 Nov 2025 12:32:59 GMT"},"fingerprint":{"sha1":"69:42:FA:87:57:29:F2:88:11:E6:D1:D4:CA:C6:CF:78:34:CA:FE:24","sha256":"7A:21:C3:D4:D1:DD:2C:A5:F7:3C:A9:BE:3F:5F:A3:A0:7B:52:55:52:DB:2B:73:F4:EF:F1:C0:31:8D:3A:92:AC"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: xa29x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/4710d66e8fda/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Sat, 30 Aug 2025 19:06:57 GMT\r\nserver: cloudflare\r\ncf-ray: 9776917ec9bc7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10095,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T08:01:09.34408Z","times_seen":17739288,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xa29x.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa29x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 11:34:44 GMT","end":"Sun, 02 Nov 2025 12:32:59 GMT"},"fingerprint":{"sha1":"69:42:FA:87:57:29:F2:88:11:E6:D1:D4:CA:C6:CF:78:34:CA:FE:24","sha256":"7A:21:C3:D4:D1:DD:2C:A5:F7:3C:A9:BE:3F:5F:A3:A0:7B:52:55:52:DB:2B:73:F4:EF:F1:C0:31:8D:3A:92:AC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min.css HTTP/1.1\r\nHost: xa29x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa29x.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Aug 2025 19:06:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 866\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Sep 2025 19:06:57 GMT\r\nlast-modified: Thu, 31 Oct 2024 10:24:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sPwCptlZJd9oDBaMhDNpdkwdUknaUX7CGHdEuY7eyovz8SHQUsyY%2BYLxT0h3ESogn%2ByRlI8NvBGlb%2FsgC1b2dQ6Vrf6rn44%3D\"}]}\r\ncf-ray: 9776917bc98a7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9929,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9889)","md5":"805d27475ef38c74e5e68d2befcc8e58","sha1":"43540b8ffc718b0ed90780561c13efabf033cb9f","sha256":"bbc96bd41ebaa607b767d15173a1651774c40613a3e0d21bb0c2b27bf57d51bf","sha512":"464da21eaf9951545147c24d70406bd2451b8b259265c50df64d4b53949699147a5542ddc38dbdda445f06d65a57c5ef0395b9289de4fe1791f22f8133c398d8","ssdeep":"96:BEW9CIKzCZ1KI/G+tl+A0zbjiviRILvo6kjO6AHReKuLjYvcv5VV:yW9CIKCG+tl+A0zb+qi6AHReKuLj6eh","tlshash":"fa22e3817d63814e16ff641b101b184ca1d9d4cde9bbecd5e8a66203c6fbec43b71928","first_seen":"2024-08-05T13:56:21Z","last_seen":"2026-08-05T20:52:16.342475Z","times_seen":1190,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xa29x.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-content/themes/twentytwentyfour/assets/fonts/inter/Inter-VariableFont_slnt%2cwght.woff2","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa29x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 11:34:44 GMT","end":"Sun, 02 Nov 2025 12:32:59 GMT"},"fingerprint":{"sha1":"69:42:FA:87:57:29:F2:88:11:E6:D1:D4:CA:C6:CF:78:34:CA:FE:24","sha256":"7A:21:C3:D4:D1:DD:2C:A5:F7:3C:A9:BE:3F:5F:A3:A0:7B:52:55:52:DB:2B:73:F4:EF:F1:C0:31:8D:3A:92:AC"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfour/assets/fonts/inter/Inter-VariableFont_slnt%2cwght.woff2 HTTP/1.1\r\nHost: xa29x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa29x.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Aug 2025 19:06:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 326628\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Sep 2025 19:06:57 GMT\r\nlast-modified: Thu, 31 Oct 2024 10:24:42 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oon8ius6ufXD4x1edoCe4af%2Fv1WWpxDglZvaYGUhkbv4dWQC5Tbv9ZK4bL%2FOnNrN2du3V2xI58TPvQElAf3hlo5pSc8LaoY%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9776917da9ae7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":326628,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 326628, version 1.0","md5":"9c9cff93a0d5a209225c1bae18d80a9d","sha1":"40546dbfd5c467c3257d8f3a4ad8af0d9995aeb6","sha256":"e931823ffd0b6cfd1624e3a7c1c49861ed3420297862e727f07e04c8be1cc89b","sha512":"6d60eba8b9ae8b8b85ac93d4da1f3ecac3d8472e9821f9a580ede27ed778b5aa590a5083ccb960602cc2b9d345fa17ed67355cac4a1d07427b1b4330a63abff1","ssdeep":"6144:xfpkCcEWnNlAharQ/P8TVcEbGEDyfVxBe3n/uhWxWFrzW/K/M/4GP:xf2CcnNlAwrqP8TVcEbgV63nqWV/6M4U","tlshash":"7b6423d7562e01f6ee6e19a700855e73f8ee2a326f7cf65c7c43a8f938a1c1464421e1","first_seen":"2023-05-10T07:09:06Z","last_seen":"2026-08-06T07:45:00.37159Z","times_seen":15696,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":63,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xa29x.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-content/uploads/fbrfg/favicon.svg","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa29x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 11:34:44 GMT","end":"Sun, 02 Nov 2025 12:32:59 GMT"},"fingerprint":{"sha1":"69:42:FA:87:57:29:F2:88:11:E6:D1:D4:CA:C6:CF:78:34:CA:FE:24","sha256":"7A:21:C3:D4:D1:DD:2C:A5:F7:3C:A9:BE:3F:5F:A3:A0:7B:52:55:52:DB:2B:73:F4:EF:F1:C0:31:8D:3A:92:AC"}}},"request":{"raw":"GET /wp-content/uploads/fbrfg/favicon.svg HTTP/1.1\r\nHost: xa29x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa29x.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Aug 2025 19:06:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 29609\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Sep 2025 19:06:57 GMT\r\nlast-modified: Thu, 31 Oct 2024 10:24:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KCa9a2ixIiIfLd%2FtzgHuocMp8HiIL7I0GTqhprMWCLHAQdXjXToRyPaLnjZ%2BMVbNeNnSmZ93lgl5TQ7drNuA3iiP%2F58R%2Bio%3D\"}]}\r\ncf-ray: 9776917f79c67131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":40203,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cedee4a3e209ca2db7293bb1bdb2e75c","sha1":"3ddf4967c5b23ace707f40cd413ba66bd0480bac","sha256":"b73cbcc084897170715054489ead184bbb921761a88ba3918c4f8bde39799679","sha512":"7df18aa3a73ea488ae792026c493c22e6180a9be9a42a0e7c09bb556d67267fcef5bbdea4bc631bb99d60b222a0f99b2ba876209b71e15b64cfc511378cd1c08","ssdeep":"768:waiqjv/9DYRpU9mPgoPyqrVUWtVh8NmprDRbz8qSuQX3yU920OX64jkR:zjvlD0TqYNbPRbzQuQXjJY6VR","tlshash":"1c03f175c5a1e12f4f86c878aa4370b9645cc6aada6b0f3711c17db1e08c914e9de2dc","first_seen":"2025-01-07T12:09:12.853924Z","last_seen":"2026-03-28T02:35:12.043158Z","times_seen":36,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xa29x.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-content/uploads/2024/10/XAI_Logo-back-2.png","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa29x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 11:34:44 GMT","end":"Sun, 02 Nov 2025 12:32:59 GMT"},"fingerprint":{"sha1":"69:42:FA:87:57:29:F2:88:11:E6:D1:D4:CA:C6:CF:78:34:CA:FE:24","sha256":"7A:21:C3:D4:D1:DD:2C:A5:F7:3C:A9:BE:3F:5F:A3:A0:7B:52:55:52:DB:2B:73:F4:EF:F1:C0:31:8D:3A:92:AC"}}},"request":{"raw":"GET /wp-content/uploads/2024/10/XAI_Logo-back-2.png HTTP/1.1\r\nHost: xa29x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa29x.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Aug 2025 19:06:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 26855\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Sep 2025 19:06:57 GMT\r\nlast-modified: Thu, 31 Oct 2024 10:24:42 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O7bkMEiSuCbIWjpWA%2BpQ%2B3ZrJerOFIBaqD2Ic%2FKyYjR%2Fm%2Fz8QTID7kZPlbUZJyTRqbPmEfqOcl0X5snUlUPTLG1Xw3XppiU%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9776917f69c57131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":26855,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"691dbbf5f6bf1a14856084b560548c31","sha1":"6925ad36154b524d11118da6fb3e68cb42714721","sha256":"bbe27b62bfedfd079b2dd9bf9178296127828a17bcf7a02ed830fc744c85d5c5","sha512":"d4a92251825a19a3afaa85c1df3bad35a61220f586bb6e4077a6d6166811c7dd3e4886c661ae36f98a3868a0130c3375c90b69adab5ac27cb3a9329c949c4e3c","ssdeep":"384:C0wDy80WlXiUEu21txhOv275fzWaP+d0ObXr25Hn/dcnHG1FZmUGC0h6IDabSq6l:Ck80KiRxt+gfP+d0MXraj9V7b9PY","tlshash":"6ac2e046dcf38d53c6a8ce92b1e22e0860b9e6f0df6f951441fc91394b277d3984e946","first_seen":"2024-12-08T06:44:01.483797Z","last_seen":"2026-07-11T08:53:25.17899Z","times_seen":51,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xa29x.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-30T19:06:56.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa29x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 11:34:44 GMT","end":"Sun, 02 Nov 2025 12:32:59 GMT"},"fingerprint":{"sha1":"69:42:FA:87:57:29:F2:88:11:E6:D1:D4:CA:C6:CF:78:34:CA:FE:24","sha256":"7A:21:C3:D4:D1:DD:2C:A5:F7:3C:A9:BE:3F:5F:A3:A0:7B:52:55:52:DB:2B:73:F4:EF:F1:C0:31:8D:3A:92:AC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xa29x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 Aug 2025 19:06:57 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 07 Aug 2025 15:31:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8EX2Xhs0RfaZFS7aWe8w7ewqGdXGeYPF5YpjnS7u8BX8z54FRwICXh%2B8nvSYoGPuPqhb2RaijIlDEtK2Z4UMHoKxVr9GLHU%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 97769179ec8256aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Elementor:3.23.4","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress:6.7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":128170,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (20373)","md5":"dc19eb95820ecf847ef504b4141755dc","sha1":"690fa328f664d960a36da540f89739b48f7fd7d0","sha256":"c888c287e37c4e12173d28b4f8f67851374c344f482354ec08366eda52eefe88","sha512":"96a9ba2cd72643c913a689fc441c9373c5d1cee233cb93bb1d2c1a9e2136652b6d56d564bcf7b0b3586dbd4b2610a3e52f718715b16c1f9161849e9b06565581","ssdeep":"1536:UGYapQMdvnwpNbE8IQTI0MZw8VNSeCkydLAWcinVKx0X3PC6QR2L0E8/Oax/k:UGXeMd6nVKx0X3PdQR2385k","tlshash":"49c31b62f26402bc394a075dc122716935e854eaf236e3acf7fba151a845ef300bdd79","first_seen":"2025-08-30T19:07:29.82625Z","last_seen":"2025-08-30T19:07:29.82625Z","times_seen":1,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":68,"dns":52,"connect":1,"send":0,"wait":68,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xa29x.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-content/uploads/elementor/css/globalb80c.css?ver=1732862663","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa29x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 11:34:44 GMT","end":"Sun, 02 Nov 2025 12:32:59 GMT"},"fingerprint":{"sha1":"69:42:FA:87:57:29:F2:88:11:E6:D1:D4:CA:C6:CF:78:34:CA:FE:24","sha256":"7A:21:C3:D4:D1:DD:2C:A5:F7:3C:A9:BE:3F:5F:A3:A0:7B:52:55:52:DB:2B:73:F4:EF:F1:C0:31:8D:3A:92:AC"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/globalb80c.css?ver=1732862663 HTTP/1.1\r\nHost: xa29x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa29x.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Aug 2025 19:06:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 2678\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Sep 2025 19:06:57 GMT\r\nlast-modified: Fri, 29 Nov 2024 12:14:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6WOZ4MSRsHfD%2FHrTc2M%2BbADg3qEsjVv%2Fwr7cVHu5ttB%2Fxn3Lq8NP8pSGa8RZrgutdOEunMXKKKPnIiW2s4pTEqtbWYJzH0o%3D\"}]}\r\ncf-ray: 9776917bc9877131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40406,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15296)","md5":"dad433af8282355e2c9c9356a92afd69","sha1":"a19a1af6d37ccefe3009b166f0955ec48828e97e","sha256":"da37297a62af599b0dbe9f3cc53fe5e0e3fe837f5994040f7367d86dd1b98b73","sha512":"81178ce2f353f757b1374b7baf0545d0e33e7d7837f08bd18e97bf8284e247ed380bdea33d97fe6130c41891e4094ff7ec815e89af613ba280e200a550f625bf","ssdeep":"192:CVFCJW/CB7J7PypJtwcHWRkXNW7t7Dd5qMCp6It0eyBrrYjBcD0NS6H0S6MSH6Hq:QqRD5x762OU3","tlshash":"8503e7887827d126f977046f758ff47c181ca4de5c4bcae7f448860689fbf2aa368614","first_seen":"2024-08-19T09:31:12Z","last_seen":"2026-07-14T19:11:59.981953Z","times_seen":247,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xa29x.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-includes/js/dist/hooks.min4fdd.js?ver=4d63a3d491d11ffd8ac6","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa29x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 11:34:44 GMT","end":"Sun, 02 Nov 2025 12:32:59 GMT"},"fingerprint":{"sha1":"69:42:FA:87:57:29:F2:88:11:E6:D1:D4:CA:C6:CF:78:34:CA:FE:24","sha256":"7A:21:C3:D4:D1:DD:2C:A5:F7:3C:A9:BE:3F:5F:A3:A0:7B:52:55:52:DB:2B:73:F4:EF:F1:C0:31:8D:3A:92:AC"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min4fdd.js?ver=4d63a3d491d11ffd8ac6 HTTP/1.1\r\nHost: xa29x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa29x.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Aug 2025 19:06:57 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1571\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 13 Nov 2024 19:48:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SMgIwu65DOyCBLn4plQQOcQYX2gI3u65JSmEJHFKaDyQkXPLyjvPDQROtCpkFYlINtKlZAq3hcqgiAHELoRe0MHIMyPU9eA%3D\"}]}\r\ncf-ray: 9776917bd9917131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4776,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4741)","md5":"c6fddbb6be69793478de26fc245b2acf","sha1":"a136ebf5054fdc19729b3592005fe0fefec4bb4c","sha256":"9a1e0d38b691f1d22a92cff65ec0439b428170ac39a4493c7ecb06d5585f56a3","sha512":"8a766304caa9c888cfcab64eabab906905965e7fbcfc4f79c74ab122b892456abad215d0883df17023a16a18ba15a6a4b3d0fa5345cab7173d778f725b827c33","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRemN:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC6","tlshash":"b4a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","first_seen":"2024-11-13T05:08:51.627546Z","last_seen":"2026-08-06T07:55:26.098332Z","times_seen":230453,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xa29x.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min05da.js?ver=4.0.2","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa29x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 11:34:44 GMT","end":"Sun, 02 Nov 2025 12:32:59 GMT"},"fingerprint":{"sha1":"69:42:FA:87:57:29:F2:88:11:E6:D1:D4:CA:C6:CF:78:34:CA:FE:24","sha256":"7A:21:C3:D4:D1:DD:2C:A5:F7:3C:A9:BE:3F:5F:A3:A0:7B:52:55:52:DB:2B:73:F4:EF:F1:C0:31:8D:3A:92:AC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min05da.js?ver=4.0.2 HTTP/1.1\r\nHost: xa29x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa29x.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Aug 2025 19:06:57 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2867\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 31 Oct 2024 10:24:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PhDZYNVRRZngPKujujtiPl9%2Fx3vJtVtgGLNwe52TyRGb1zOa%2F5P%2BMHKFBCyVCi6Oaxgo2ezg%2FW8r5xYwgxGeitvxgPSLqJ8%3D\"}]}\r\ncf-ray: 9776917bd9947131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12198,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12198), with no line terminators","md5":"3819c3569da71daec283a75483735f7e","sha1":"ecd40a5cc6f0b76200c454ca880210dc301cfab8","sha256":"214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0","sha512":"2710655dff46653daeb3a6e3f6d36f885e51d5b375738ee353aca40c6f66ae1a7dece57039d58747012ed9ea2822191143c06f270123b8cc580f6a41b8e8aef4","ssdeep":"192:GngaW9ELBD26z861V/CvJiVKIsvfT+6EdpEsBpP9Qwo7Q4a99RfuzqXppc4mmm9t:Ggz9kBD26861V/wsVKIsvTEdpEsnmwoz","tlshash":"994221493e0724222faf41f9fc1b468a632b013894c584bbb8e4d5dd18f19296f77b78","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-08-06T08:01:07.582919Z","times_seen":74185,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xa29x.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/cdn-cgi/challenge-platform/h/b/jsd/r/0.26822771109976923:1756579587:RC0LvnWJg0bunnas9aG6y3l4JBqh79y-xKDw0Hj8ceE/97769179ec8256aa","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:58.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa29x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 11:34:44 GMT","end":"Sun, 02 Nov 2025 12:32:59 GMT"},"fingerprint":{"sha1":"69:42:FA:87:57:29:F2:88:11:E6:D1:D4:CA:C6:CF:78:34:CA:FE:24","sha256":"7A:21:C3:D4:D1:DD:2C:A5:F7:3C:A9:BE:3F:5F:A3:A0:7B:52:55:52:DB:2B:73:F4:EF:F1:C0:31:8D:3A:92:AC"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/r/0.26822771109976923:1756579587:RC0LvnWJg0bunnas9aG6y3l4JBqh79y-xKDw0Hj8ceE/97769179ec8256aa HTTP/1.1\r\nHost: xa29x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12074\r\nOrigin: https://xa29x.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa29x.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Sat, 30 Aug 2025 19:06:58 GMT\r\ncontent-length: 0\r\nset-cookie: cf_clearance=iskJ.0X1aXYrKuVPaq4lHskMYA8_sVMufvxk3khljqQ-1756580818-1.2.1.1-JaWjiwDYnpr_XYcURicZSzwiI2xDqSAS91v3jY525nxhdQyB4PYB.X_KG2QnwWUpiCKvv4b_IN.A.G30k5szOR_NVKe3MZBVgkTYMEt.yILkBeWEfMwO1FFyEuo8EkuH9siAXK26tuJSIsho_4_x65EmbruYIDHLehI.1qsC1hq26kAFMS2o5KPcY.3Jfc0h16zaY33zCweUcvEwf3RjOLsboGmIO5dMYOC8iTE2sUo; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=xa29x.com; Expires=Sun, 30 Aug 2026 19:06:58 GMT\r\nserver: cloudflare\r\ncf-ray: 9776918099e87131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T08:01:09.34408Z","times_seen":17739288,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xa29x.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/4710d66e8fda/main.js?","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa29x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 11:34:44 GMT","end":"Sun, 02 Nov 2025 12:32:59 GMT"},"fingerprint":{"sha1":"69:42:FA:87:57:29:F2:88:11:E6:D1:D4:CA:C6:CF:78:34:CA:FE:24","sha256":"7A:21:C3:D4:D1:DD:2C:A5:F7:3C:A9:BE:3F:5F:A3:A0:7B:52:55:52:DB:2B:73:F4:EF:F1:C0:31:8D:3A:92:AC"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/4710d66e8fda/main.js? HTTP/1.1\r\nHost: xa29x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Sat, 30 Aug 2025 19:06:57 GMT\r\nserver: cloudflare\r\ncf-ray: 9776917f79c77131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10095,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10095), with no line terminators","md5":"af052da3cb1830eed03e9c79ec35637d","sha1":"9dd538a69d4fcdc5dc2309685de675e6ac3ff18e","sha256":"4dd1c93977063719550c762fcec9964cb0cfd0efbdde173af7a723f28fbd9271","sha512":"d52b43658ff2328d5d30baead3599b6aff8d2109901a17b2c8c45abd3f0e847ffef7bb91d04eaa963b271fc0305d5e806a0eb4d8a88db6fb5852302fed0f88d0","ssdeep":"192:bbcBBEIrafLZwIxMuI9IUIvI7IDIH8CMrI5nTdpS5lWjMNMW8:bwHEIYLZwpfJh4CmMW8","tlshash":"6022f9ce7ac8a6b8c1736152d11b65efd121bee912442c138a50d8acff30399e967f64","first_seen":"2025-08-30T19:02:07.608465Z","last_seen":"2025-08-30T19:07:29.830118Z","times_seen":3,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xa29x.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min28fc.js?ver=3.23.3","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa29x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 11:34:44 GMT","end":"Sun, 02 Nov 2025 12:32:59 GMT"},"fingerprint":{"sha1":"69:42:FA:87:57:29:F2:88:11:E6:D1:D4:CA:C6:CF:78:34:CA:FE:24","sha256":"7A:21:C3:D4:D1:DD:2C:A5:F7:3C:A9:BE:3F:5F:A3:A0:7B:52:55:52:DB:2B:73:F4:EF:F1:C0:31:8D:3A:92:AC"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min28fc.js?ver=3.23.3 HTTP/1.1\r\nHost: xa29x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa29x.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Aug 2025 19:06:57 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2548\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 31 Oct 2024 10:24:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ej%2FKYBq5uwn1sLbZT75kGa7%2FcGBzy80aU9vMIA8FtfHNkl9qVbBXhMoTz2mJ0QzKSLkr8K8B6mhil6pUQ%2BQCxQ%2BWCLoeFug%3D\"}]}\r\ncf-ray: 9776917bc98c7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6060,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6016)","md5":"06e65e3f3efc8bc03a8028d683faaf9c","sha1":"65190238c4d0cf5088a64e0a5dbef346fbb7c6b9","sha256":"123570e6c301162c06b39e2d7e93f31dabcd43e37344fc87f15dc9c5f48f5803","sha512":"2588befb241d59f6da19fd3c73c9eda15b74453198aa086b3de67283e637029375dc588bf0f11c9db6589f6a730ef42ec301eac8091e0cd3e1d2d47f6812aee4","ssdeep":"96:BOV+Ha9P6f0Rfz2dL5MeaqA6iZh0DTl7CKEpre1oXq6x4AfqqMxEjRl2c1cV2eVM:MEHGSfWYL5MeawiZQTgvrL66COBMxEPf","tlshash":"efc165991a58ad2f26e03ad8b0876b701e3dd0233d19da81e552eddc59f8fd083d9533","first_seen":"2024-08-06T05:36:52Z","last_seen":"2026-08-05T20:52:16.309137Z","times_seen":3599,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xa29x.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-content/plugins/elementor/assets/js/webpack.runtime.mind5d5.js?ver=3.23.4","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa29x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 11:34:44 GMT","end":"Sun, 02 Nov 2025 12:32:59 GMT"},"fingerprint":{"sha1":"69:42:FA:87:57:29:F2:88:11:E6:D1:D4:CA:C6:CF:78:34:CA:FE:24","sha256":"7A:21:C3:D4:D1:DD:2C:A5:F7:3C:A9:BE:3F:5F:A3:A0:7B:52:55:52:DB:2B:73:F4:EF:F1:C0:31:8D:3A:92:AC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.mind5d5.js?ver=3.23.4 HTTP/1.1\r\nHost: xa29x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa29x.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Aug 2025 19:06:57 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2069\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 31 Oct 2024 10:24:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uUtDPtRQQCy81lbz5vGL%2FFCQysUBetYbuWULGn4sdWa6SRmtjaI2L9hoGXpkSKls8IL5qIM0L9Ddt%2FqxckD72WzwWe6vbmc%3D\"}]}\r\ncf-ray: 9776917bc98d7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4997,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4957)","md5":"65aed095bbea6c79aefa67ab240f55e6","sha1":"237a4e165dadfb8c7ccd5cf3653365a4f4fedcca","sha256":"612c7268d82895019e8b18ec61941fd00d0ada067dae8facb7b9c2bade385a4d","sha512":"dbb3bc28fd813f08802e055d2a299a0f29d0966012e93d7ef61ed217fe2b4e4cc557154567b60501b7933db3d9ea422b9d35d182f774805d23fa9b467d54c760","ssdeep":"96:BlsNt0jqf9fz9TNrf8nDmDllCjNVobVDPkqflkxwvT8S2:7sNCjw9fhTNYyD4N4FPkyXgS2","tlshash":"b7a130d41b90fc6735e135c5a41aa731762fc0337d1ab8c1fa22dced98e8a9187a9931","first_seen":"2024-08-05T13:56:21Z","last_seen":"2026-08-05T20:52:16.343132Z","times_seen":3754,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xa29x.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-content/plugins/elementor-pro/assets/js/frontend.min28fc.js?ver=3.23.3","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa29x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 11:34:44 GMT","end":"Sun, 02 Nov 2025 12:32:59 GMT"},"fingerprint":{"sha1":"69:42:FA:87:57:29:F2:88:11:E6:D1:D4:CA:C6:CF:78:34:CA:FE:24","sha256":"7A:21:C3:D4:D1:DD:2C:A5:F7:3C:A9:BE:3F:5F:A3:A0:7B:52:55:52:DB:2B:73:F4:EF:F1:C0:31:8D:3A:92:AC"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/frontend.min28fc.js?ver=3.23.3 HTTP/1.1\r\nHost: xa29x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa29x.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Aug 2025 19:06:57 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 6464\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 31 Oct 2024 10:24:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8rEnfifZBYNa7UhGe34X%2BOnfvDZ%2B0Efq3Vk88V9a5Byuh9dCVoVNfaxX2mOC0AX%2BOlq5hREmWk2kpbPAqZNLZcUTKHx63c0%3D\"}]}\r\ncf-ray: 9776917bd9937131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":25050,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (25006)","md5":"a0a2f51765a92a636852b44bdfc07f6a","sha1":"bc4a0e02ecd149e738b87ab6756ac1558da1b21e","sha256":"c440a64d637fe748b3872cd160dc9aabb3d9e5f2c8010675d1b949c99e34beb4","sha512":"d92d0e759cc46a1994cb3aa9e1b8e2633a2ffdf8682ab1899b9d7aacb4df0cb3a1811dedae745ea6e8b76132ab4a96282aa4a1a5715f28bef44d6cfdac9014e7","ssdeep":"768:aTLX+EVxFm6cKibdndptaQ9HuGJswyC/pkTAQYtDT6HJiwknOsN7KOljuOzQYqEw:etVxFm61ib94Q9HuGHiiwkOsN7KOljuP","tlshash":"51b2d9063153a87a50cfc15be067420e7b374885740570ed7abc6ceba5b8d9a33ea339","first_seen":"2024-08-06T05:36:53Z","last_seen":"2026-08-05T20:52:16.324109Z","times_seen":3595,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xa29x.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xa29x.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min28fc.js?ver=3.23.3","fqdn":"xa29x.com","domain":"xa29x.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa29x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 11:34:44 GMT","end":"Sun, 02 Nov 2025 12:32:59 GMT"},"fingerprint":{"sha1":"69:42:FA:87:57:29:F2:88:11:E6:D1:D4:CA:C6:CF:78:34:CA:FE:24","sha256":"7A:21:C3:D4:D1:DD:2C:A5:F7:3C:A9:BE:3F:5F:A3:A0:7B:52:55:52:DB:2B:73:F4:EF:F1:C0:31:8D:3A:92:AC"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min28fc.js?ver=3.23.3 HTTP/1.1\r\nHost: xa29x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa29x.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Aug 2025 19:06:57 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 9628\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 31 Oct 2024 10:24:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1G21KGZMmGUBCx5AGSBNJDyVXalNo4pqQjxEkd4eYZMJTGWw6QILu38lpdUl%2FFlNL7AOMoVTHtEnWe%2FhnurKtxfw6nj%2F9wA%3D\"}]}\r\ncf-ray: 9776917be9977131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":42585,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (42541)","md5":"e1e347f637e6cedbe57d46f801d8c534","sha1":"40e9ee2e614a91cd5c1afba1dc9fa3e15f7ce3eb","sha256":"e7139bd7f7f045b4e0c2ed3ca13bcefdce330a38e84bff93917caa4bbef28f59","sha512":"444b49a78576671d6d674fe893eb42a1e9ac90bf8fdb7b504191bcf96293882e953d6aac0265256cee86437299b453fa3cac733dd631b966a8e067fb3ea7117c","ssdeep":"768:p3TAiHylK1YE6A5yLseTRadwdddrdDdLdDdGdydOdad6dpdLdFdVdf1FUfvqMIOu:NANK1YE6A5yLsSRaC/dR9ZQIM4g7lv//","tlshash":"fb13a55171aaca6845cfc4abf423264fa722ac9cb413f4d77afc8d826464ec76350771","first_seen":"2024-08-06T05:36:53Z","last_seen":"2026-08-05T20:52:16.319168Z","times_seen":3594,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"xa29x.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xa29x.com/","date":"2025-08-30T19:06:57.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:22:25 GMT","end":"Mon, 03 Nov 2025 19:22:24 GMT"},"fingerprint":{"sha1":"F5:9E:5D:EB:46:9B:ED:9F:D2:D7:E8:D1:06:43:DF:9D:0C:13:7E:75","sha256":"AA:C4:C0:AF:38:AE:91:75:3F:86:CE:32:70:A9:8F:C4:2F:7F:D2:28:D1:34:AD:0A:C8:E2:6C:6E:4D:46:72:23"}}},"request":{"raw":"GET /s/poppins/v23/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xa29x.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 27 Aug 2025 20:17:34 GMT\r\nexpires: Thu, 27 Aug 2026 20:17:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 254963\r\nlast-modified: Wed, 23 Apr 2025 16:07:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-08-06T07:53:51.226653Z","times_seen":272821,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":95,"dns":3,"connect":7,"send":0,"wait":17,"receive":1,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}